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DETAILED ACTION 
Allowable Subject Matter 

1 . Claim 7 is not allowed but could be if the 35 USC Sec. 112 rejections were 
overcome. The closest prior art to Claim 7 is Hice et al. (Hice, G.F. and Wold, S.H., 
DMS Prologue to the Government E-Mail Revolution, 1995, JG. Van Dyke & 
Associates, Inc.) which teaches: 

A method for efficient encryption and decryption of Internet, Intranet, or e-mail 
messages, comprising the steps of; 

• encrypting a message at a sending unit which is to be sent to a receiving unit using 
an integrated circuit embedded with algorithm located within said sending unit (Hice 
etal. p. 120); 

• appending to the message at said sending unit the receiver's unencrypted IP 
address (Hice et al. p. 84 and 120 where the P1/P3/P7 envelope includes an 
unencrypted IP address of the recipient); 

• appending to said message the receiver's encrypted IP address (Hice et al. p. 84 
where the IP address is in the encrypted P772 header); 

• said sending unit sends said encrypted message with said unencrypted IP address 
and said encrypted IP address (Hice et al. p.84 where the DMS message format 
contains all these features); 

• receiving unit with an integrated circuit embedded with an encryption algorithm 
located within said receiving unit receives said encrypted message with said 
unencrypted IP address and said encrypted IP address using a receiving unit (Hice 



Application/Control Number: 09/490,941 Page 3 

Art Unit: 2132 

et al. p. 121 and 122 where the FORTEZZA Card is used to receive encrypted DMS 
messages and decrypt them); 

• receiving unit decrypts said encrypted IP address, storing said decrypted IP address 
in a register built into said integrated circuit embedded encryption algorithm located 
within receiving unit (Hice et al. p. 121 and 122 where the FORTEZZA Card is used 
to receive encrypted DMS messages with headers and decrypt them); 

However, Hice et al. fails to teach: 

• receiving unit stores said unencrypted IP address in a register built into said 
integrated circuit embedded with an encryption algorithm located within receiving 
unit; 

• means for comparing said register storing unencrypted IP address to said register 
storing decrypted IP address; 

• receiving unit decrypts said message if said register storing unencrypted IP address 
matches said register storing encrypted IP address; 

• means for halting decryption process if said register storing unencrypted IP address 
does not match said register storing encrypted IP address. 

Drawings 

2. The drawings are objected to as failing to comply with 37 CFR 1 .84(p)(4) 
because reference character "56" has been used to designate both "send message 
through private network"' and "send message through network". Correction is required. 
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3. The drawings are objected to as failing to comply with 37 CFR 1 84(p)(5) 
because they do not include the following reference sign(s) mentioned in the 
description: 30, 32, 34, 36, and 38. Correction is required. 

4. The drawings are objected to as failing to comply with 37 CFR 1.84(p)(5) 
because they include the following reference sign(s) not mentioned in the description: 
10, 12, 14, 16, and 18. Correction is required. 

Claim Rejections - 35 USC §112 

5. The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

6. Claims 3-7 are rejected under 35 U.S.C. 112, second paragraph, as being 
indefinite for failing to particularly point out and distinctly claim the subject matter which 
applicant regards as the invention. Correction is required for the following: 

• Claims 3 and 4 are process claims dependent from an apparatus claim. 

• Claims 5 and 7 are method claims with apparatus elements. 

• Claim 6 is unclear from which claim or combination of claims it depends. 
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Claim Objections 

7. Claims 1 : 3, and 5 are objected to because of the following informalities: the term 
"digital bit arrays" is not defined in the specification. Appropriate correction is required. 

Specification 

8. The specification is objected to as failing to provide proper antecedent basis for 
the claimed subject matter. See 37 CFR 1 -75(d)(1) and MPEP § 608.01 (o). Correction 
of the following is required: Claims 1 , 3, and 5 refer to "digital bit arrays" which are not 
mentioned in the specification. 

Claim Rejections - 35 USC § 103 

9. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

10. Claims 1-6 are rejected under 35 U.S.C. 103(a) as being unpatentable over Hice 
et al. (Hice, G.F. and Wold, S.H., DMS Prologue to the Government E-Mail Revolution, 
1995, JG. Van Dyke & Associates, Inc.). 

Claim 1 

Hice et al. teaches arvapparatus for efficient encrypting and decrypting Internet, 
Intranet, ore-mail messages, comprising: 
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• an integrated electronic circuit said circuit physically located within a computer 
communication device (Hice et al. p. 122; where the communication device is a 
PCMCIA card reader and the Fortezza PCMCIA card comprises an integrated 
electronic circuit). 

• said circuit embedded with a random private cipher key generator (Hice et al. p. 120 
and 122 where all crypto algorithms are embedded on the Capstone chip); 

• said circuit embedded with asymmetric encryption algorithms (Hice et al. p. 122; 
where the Key Encryption Algorithm is an asymmetric encryption algorithm); 

• said circuit embedded with symmetric encryption algorithms (Hice et al. p. 121; 
where Skipjack is a symmetric encryption algorithm); 

• said circuit embedded with asymmetric decryption algorithms (Hice et al. p. 122; 
where the Key Encryption Algorithm is an asymmetric decryption algorithm); 

• said circuit embedded with symmetric decryption algorithms (Hice et al. p. 121; 
where Skipjack is a symmetric decryption algorithm);. 

Hice et al. fails to teach a digital bit array. 

Official notice is taken that it is old and well known in the computer arts for an 
integrated circuit to be embedded with a common digital bit array/pre-loaded data to get 
the advantage of initializing a circuit. It would have been obvious to one of ordinary skill 
in the art at the time of the Applicant's invention to modify the system of Hice et al., then 
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not modify it, to get this advantage (See Hice et al. p. 122 describing the ability of the 
Fortezza Card to store data). 



Claim 2 

Hice et al. teaches an apparatus wherein a circuit is located external of a 
computer communication device, and means for connecting said externally located 
circuit to said communication device (Hice et al. p. 122 where the FORTEZZA PCMCIA 
card is a mobile device readily insertable into a PCMCIA Card reader.). 

Claim 3 

Hice et al. teaches a process to permit access to said encryption and decryption 
circuit recited in claim 1 : wherein user access to said circuit further comprises: 

• means for converting multiple user defined passwords into digital bit arrays (Hice et 
al. p. 33 describing PIN entry into a FORTEZZA PCMCIA card); 

• means for programming said digital bit arrays into a non-volatile register located 
within said circuit (Hice et al. p. 122 describing the ability of the Fortezza Card to 
store data); 

• means for verifying future user request to access said circuit with said stored digital 
bit arrays (Hice et al. p. 33 describing PIN entry into a FORTEZZA PCMCIA card); 

• means for permitting user access to said circuit upon verification of user defined 
password with stored digital bit array (Hice et al. p. 33 describing PIN entry into a 
FORTEZZA PCMCIA card); 
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• means for denying access to said circuit upon lack of verification of user defined 
password with stored digital bit array (Hice et aL p. 33 describing PIN entry into a 
FORTEZZA PCMCIA card). 

Claim 4 

Hice et al. teaches a process to bypass said encryption and decryption circuit 
recited in claim 1, comprising means for said computer communication device operating 
without accessing said circuit, thereby said communications device operating 
unencrypted (Hice et al. p.33 describing a FORTEZZA PCMCIA card which can be 
removed from a PCMCIA card reader/communications device and PCMCIA card reader 
still being inherently functional). 

Claim 5 

Hice et al. teaches a method of sending encrypting Internet, Intranet, or e-mail 
messages, comprising the steps of: 

• encrypting a message using an integrated circuit embedded with encryption 
algorithms (Hice et aL p. 121; where Skipjack is a symmetric encryption algorithm); 

• said integrated circuit further embedded with random private cipher key generator 
(Hice et aL p. 122 where all crypto algorithms are embedded on the Capstone chip); 

• appending an encrypted message header to said encrypted message, said message 
header encrypted using a receiver's public encryption key (Hice et al. p. 86 and 

p. 120 where the encryption process includes a Message Encryption Key (MEK) that 
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is used to encrypt a message header and the receiver's public key is used to encrypt 
the MEK); 

• said encrypted message header further comprising the sender's private signature 
cipher key and common digital bit array (Hice et al. p. 120 where the sender's private 
cipher key is the MEK and the digital bit array is an array of data); 

• means for transmitting said encrypted message header and said encrypted message 
to receiver over Internet (Hice et al. p. 121 where E-mail is the means), 

• means for transmitting said encrypted message header and said encrypted message 
to receiver over Intranet (Hice et al. p. 121 where E-mail is the means), 

• means for transmitting said encrypted message header and said encrypted message 
to receiver by e-mail (Hice et al. p. 121 where SMTP or X.400 E-mail is used); 

• means for transmitting said encrypted message header and said encrypted message 
to receiver through wireless communication medium (Hice et al. p. 49, Fig. 3-1, and 

p. 51 where the Defense Messaging System (DMS) uses hand-held ; spread 
spectrum radio tranceivers). 

Hice et al. fails to teach a digital bit array. 

Official notice is taken that it is old and well known in the computer arts for an 
integrated circuit to be embedded with a common digital bit array to get the advantage 
of having a memory to store data (e.g. a user's private keys, public keys, authorizations, 
clearance level, and privileges, data storage key and executable programs). It would 
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have been obvious to one of ordinary skill in the art at the time of the Applicant's 
invention to modify the system of Hice et al., then not modify it, to get this advantage 
(See Hice et al. p. 122 describing the ability of the Fortezza Card to store data). 

Claim 6 

Hice et al teaches a method of receiving and decrypting an encrypted message 
comprising the steps of; 

• means for receiving an encrypted message header and encrypted message header 
and an encrypted message over Internet (Hice et al. p. 121 where E-mail is the 
means); 

• means for receiving an encrypted message header and encrypted message header 
and an encrypted message over Intranet (Hice et al. p. 121 where E-mail is the 
means); 

• means for receiving an encrypted message header and encrypted message header 
and an encrypted message by e-mail (Hice et al. p. 121 where SMTP or X.400 E- 
mail is used); 

• means for receiving an encrypted message header and encrypted message header 
and an encrypted message through wireless communication medium (Hice et al. 
p.49, Fig. 3-1, and p. 51 where the Defense Messaging System (DMS) uses hand- 
held, spread spectrum radio tranceivers).; 

• receiver gain access to decrypting integrated circuit as recited in claim 2 (Hice et al. 
p. 33 describing PIN entry into a FORTEZZA PCMCIA card); 
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• means for integrated circuit to decrypt and validate common digital bit array located 
in message header (Hice et aL p. 33 describing PIN entry into a FORTEZZA 
PCMCIA card); 

• means for integrated circuit to decrypt sender's private signature cipher (Hice et al. 
p. 121 where the FORTEZZA Card is used to decrypt data); 

• means for sender's private signature cipher key to permit access to decrypting 
integrated circuit for decryption of message (Hice et al. p. 121 where the FORTEZZA 
Card is used to decrypt data); 

Hice et al. fails to teach: 

• means for deleting sender's private signature cipher key from memory of receiver's 
computer; 

• means for preventing receiver from viewing, saving, copying, or retaining sender's 
private signature cipher key. 

Official notice is taken that it is old and well known in the cryptographic arts to 
discard a symmetric key once it is used and not reuse it but for the reaccessing of the 
item encrypted therefrom to get the advantage of more secure communications - repeat 
use of keys can lead to compromise of confidential data. It would have been obvious to 
one of ordinary skill in the art at the time of the Applicant's invention to modify the 
system of Hice et al., then not modify it, to get this advantage. 
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Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Ronald F. Sulpizio whose telephone number is (703) 
308-2391 . The examiner can normally be reached on FF. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Tod R. Swann can be reached on (703) 308-7791. The fax phone numbers 
for the organization where this application or proceeding is assigned are (703) 305-0040 
for regular communications and (703) 308-5065 for After Final communications. 
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Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is (703) 306- 
5484. 
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Dear Parent and Trademark Office Customer: 



The Technical Support Staff of Technology Center 2100 has undertaken continuous 
quality improvement efforts to ensure that the accompanying correspondence meets high 
quality standards, and focuses on good customer sen-ice. It is important to us that you 
are satisfied with the sen-ices we provide. 

If the contents of the attached correspondence has any clerical omissions, 
e.g., missing references or pages, illegible text, other problems or concerns of this nature 
which you wish to bring to my attention, please call or fax me as soon as possible. 1 will 
take the appropriate action to expedite the necessary corrections. 




He-. id, Supervisory kegal Instruments Examiner 
Technology Center 2100 
(703) 305-4376 



Fax No. (703) 308-9051 or (703) 308-9052 



Attention: Policy on Returning Phone Calls 

A PTO-wide customer service standard is if a PTC) employee In-m^caHed is not available, they will 
return your call bv the next business day, or, it vou request, an alternate point or omtact will be 
provided. Technology Center 2100 is committed to meeting this service standard. It you have called any 
employee in our Technology Center and have not received a return phone call within one (I) business 
day or have not been provided another point of contact, please c mtact the Technology Center at 
703-306-5631. We ensure that you will receive a return phone call, from an employee with the ability to 
assist you, within tour (4) business hours of" this contact. We appreciate your help m assisting us to help 
you. 



In The United States Patent and Trademark Office 



Mailed 2000 April 19 



Assistant Commissioner for Patents 



Washington. DC 20231 



Certificate of Mailing 



I certify that this correspondence will be deposited with the United States Postal Service as first 
class mail with proper postage affixed in an envelope addressed to: Assistant Commissioner for 
Patents : Washington ; DC 2023 1 ? on the date below. 

Items Included: 

1 Information Disclosure Statement (2 sheets) 

1 US Patent - Lewis (#5,761,306) 

1 US Patent - Nakamura (#6,014.444) 

1 US Patent - Coutts (#5,835,603) 

1 PC Guardian datasheet 

1 Return Postcard 
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David Czajkowski 
Bernard Gudaitis 
332 Alviso Way 
Encinitas, CA 92024 
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Receipt is acknowledged of this nonprovisional Patent Application. It will be considered in its order and you will be 
notified as to the results of the examination. Be sure to provide the U.S. APPLICATION NUMBER, FILING DATE, 
NAME OF APPLICANT, and TITLE OF INVENTION when inquiring about this application. Fees transmitted by 
check or draft are subject to collection. Please verify the accuracy of the data presented on this receipt. If an error 
is noted on this Filing Receipt, please write to the Office of Initial Patent Examination's Customer Service 
Center. Please provide a copy of this Filing Receipt with the changes noted thereon. If you received a 
"Notice to File Missing Parts" for this application, please submit any corrections to this Filing Receipt with 
your reply to the Notice. When the PTO processes the reply to the Notice, the PTO will generate another 
Filing Receipt incorporating the requested corrections (if appropriate). 
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David Czajkowski, Encinitas, CA ; 

Bernard Gudaitis, Palos Verdes Estates, CA ; 
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Encrypted internet and intranet communication device 
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LICENSE FOR FOREIGN FILING UNDER 
Title 35, United States Code, Section 184 
Title 37, Code of Federal Regulations, 5.11 & 5.15 

GRANTED 

The applicant has been granted a license under 35 U.S.C. 184, if the phrase "IF REQUIRED, FOREIGN FILING 
LICENSE GRANTED" followed by a date appears on this form. Such licenses are issued in all applications where 
the conditions for issuance of a license have been met, regardless of whether or not a license may be required as 
set forth in 37 CRF 5.15. The scope and limitations of this license are set forth in 37 CFR 5.15(a) unless an earlier 
license has been issued under 37 CFR 5.15(b). The license is subject to revocation upon written notification. The 
date indicated is the effective date of the license, unless an earlier license of similar scope has been granted under 
37 CFR 5.13 or 5.14. 

This license is to be retained by the licensee and may be used at any time on or after the effective date thereof 
unless it is revoked. This license is automatically transferred to any related applications(s) filed under 36 CFR 
1 .53(d). This license is not retroactive. 

The grant of a license does not in any way lessen the responsibility of a licensee for the security of the subject 
matter as imposed by any Government contract or the provisions of existing laws relating to espionage and the 
national security or the export of technical data. Licensees should apprise themselves of current regulations 
especially with respect to certain countries, of other agencies, particularly the Office of Defense Trade Controls, 
Department of State (with respect to Arms, Munitions and Implements of War (22 CFR 121-128)); the Office of 
Export Administration, Department of Commerce (15 CFR 370.10 G)); the Office of Foreign Assets Control, 
Department of Treasury (31 CFR Parts 500+) and the Department of Energy. 

NOT GRANTED 

No license under 35 U.S.C. 184 has been granted at this time, if the phrase "IF REQUIRED, FOREIGN FILING 
LICENSE GRANTED" DOES NOT appear on this form. Applicant may still petition for a license under 37 CFR 5.12, 
if a license is desired before the expiration of 6 months from the filing date of the application. If 6 months has lapsed 
from the filing date of this application and the licensee has not received any indication of a secrecy order under 35 
U.S.C. 181, the licensee may foreign file the application pursuant to 37 CFR 5.15(b). 
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of an application because a patent application, by nature, is a new idea or improvement. 

• The title may be truncated if it consists of more than 600 characters (letters and spaces combined). 

• The docket number allows a maximum of 25 characters. 
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The following received today: 

Patent Application for David Czajkowski and 
Bernard Gutaitis for "encrypted internet and 

INTRANET COMMUNICATION DEVICE", 

Consisting of 12 sheets of specifications, claims, 
and abstract, declaration signed 2000 January 25, 
4 sheets informal drawings, small entity declaration, 
and check #1745 for $345.00. 



In the United States Patent and Trademark Office 



First Applicant: David Czajkowski 
Second Applicant: Bernard Gudaitis 

Title:" ENCRYPTED INTERNET AND INTRANET COMMUNICATION DEVICE" 



Small Entity Declaration - Independent lnventor(s) 



As a below named inventor, I hereby declare that I qualify as an independent inventor as defined 
in 37 C.F.R. 1 .9(c) for purposes of paying reduced fees under Section 41(a) and (b) of Title 35 
United States Code, to the Patent and Trademark Office with regard to my above-identified 
invention described in the specification filed herewith. I have not assigned, granted, conveyed, or 
licensed - and am under no obligation to under any contract or law to assign, grant, convey or 
license - any rights in the invention to either (a) ant person who could not be classified as an 
independent inventor under 37 C.F.R. 1.9(c) if that person had made the invention, or (b) any 
concern which would not qualify as either (i) a small business concern under 37 C.F.R. 1 .9(d) or 
(ii) a nonprofit corporation under 37 C.F.R. 1.9(e). 

Each person, concern, or organization to which I have assigned, granted, conveyed, or licensed - 
or am under an obligation to under any contract or law to assign, grant, convey or license - any 
rights in the invention is listed below: 

X There is no such person, concern, or organization. 
Any applicable person, concern, or organization is listed below: 



I acknowledge a duty to file, in the above application for patent, notification of any change in 
status resulting in loss of entitlement to small entity status prior to paying, or at the time of 
paying, the earliest of the issue fees or any maintenance fees due after the date on which the 
status of small entity is no longer appropriate. (37 CFR 1 .28(b)) 

I hereby declare that all statements made herein of my own knowledge are tnie and that all statements made 
on information and belief are believed to be true; and farther that these statements were made with the 



knowledge that the willful false statements and the like so made punishable by fine or imprisonment, or 
both, under Title 18 : United States Code. Section 1001, and that such willful false statements may 
jeopardize the validity of the application or any patent issued thereon, or any patent to which this verified 
statement is directed. 




Dated 2000 January 25 Dated 2000 January 25 



Declaration for Utility Patent Application 



As below named inventor I hereby declare that my residence, post office address, and citizenship 
are stated below next to my name and that I believe I am the original, first, and sole inventor (if 
only one name is listed below) or and original, first, and joint inventor (if plural names are listed 
below) of the subject matter which is claimed and for which a patent is sought on the invention, 
the specification of which is attached hereto which has the following title: 



I have reviewed and understand the contents of the above-identified specification, including the 
claims, as amended by any amendment specifically referred to in the oath or declaration. I 
acknowledge a duty to disclose information which is material to the examination of this 
application in accordance with Title 37, Code of Federal Regulations, Section 1.56(a). 

I hereby declare that all statements made herein of my own knowledge are true and that all 
statements made on information and belief are believed to be true; and further that these 
statements were made with the knowledge that the willful false statements and the like so made 
punishable by fine or imprisonment, or both, under Title 18, United States Code, Section 1001, 
and that such willful false statements may jeopardize the validity of the application or any patent 
issued thereon. 

Please send correspondence and make telephone calls to the First Inventor below. 



ENCRYPTED INTERNET MODEM COMMUNICATIONS SYSTEM" 




Date: 2000 January 25 



Name: 



David Czajkowski 
332 Alviso Way 
Encinitas, CA 92024 



Mailing Address: 



Phone: (760)633-4450 



Legal Residence: 




Encinitas. CA 



Citizenship: USA 



Date: 2000 Jatiuary 25 



Name: 



Bernard Gudaitis 



Mailing Address: 



1241 Via Landeta 



Phone: (310) 373-1633 



Palos Verdes Estates, CA 90274 



Legal Residence: 



Palos Verdes Estates 



Citizenship: USA 



In The United States Patent and Trademark Office 



Mailed 2000 January 25 



Box Patent Application 



Assistant Commissioner for Patents 



Washington, DC 20231 



Sir: 



Please file the following enclosed patent application papers: 
Applicant #1 . Name: David Czajkowski 
Applicant #2, Name: Bernard Gudaitis 

Title: "ENCRYPTED INTERNET AND INTRANET COMMUNICATION DEVICE" 

■ Specification. Claims, and Abstract: Nr. Of Sheets: U 

■ Declaration: Date Signed: 2000 January 25 

■ Drawing(s): Nr. Of Sheets: Informal: 4 

■ Small Entity Declaration of Lnventor(s) 

■ Check #1745 for the amount of $ 345.00 for filing fee ( not more than three independent 
claims and twenty total claims are presented. 

■ Return Receipt Postcard Addressed to Applicant #1 . 

Request Under MPEP section 707.07(j): The undersigned, a pro se applicant respectfully 
requests that if the Examiner finds patentable subject matter disclosed in this 
application, but feels that the Applicant's present claims are not entirely suitable, the 
Examiner draft one or more allowable claims for the applicant. 

Very Respectfully, 



David Czajkowski Bernard Gudaitis 

332 Alviso Way (Send Correspondence Here) 1241 Via Landeta 
Encinitas, CA 92024 Palos Verdes Estates, CA 90274 





Express Mail Label # 



Date Deposited 2000 January 25 



In The United States Patent and Trademark Office 



Mailed 2000 January 25 

Box Patent Application 

Assistant Commissioner for Patents 

Washington, DC 20231 



FEE TRANSMITTAL 



First Named Applicant: David Czajkowski 

Title of Invention: "ENCRYPTED INTERNET AND INTRANET COMMUNICATION DEVICE" 
Total Payment Enclosed (from Calculation Below): $ 345.00 Check #1745 



Sir: 

Enclosed is the following small entity fee for the above patent application: 

Fee Code Fee Description Fee($) 

210 Basic Utility Appn. Filing Fee $345.00 



203 Total Claims 7: Number of claims over 20: 0 =0 
202 Total Indep. Claims 3; Number of Indep Claims over 3: 0 = 0 
Subtotal (2) = 0 



Total Payment Enclosed [Sum of Subtotal(l) and Subtotal(2)] $345.00 



Very Respectfully. 



David Czcffkowsl; 
332 Alviso Way 1 
Encinitas, CA 92024 
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David Czajkowski and Bernard Gudaitis 
For 

TITLE: ENCRYPTED INTERNET AND INTRANET COMMUNICATION DEVICE 

CROSS-REFERENCE TO RELATED APPLICATIONS 

Not Applicable 

BACKGROUND ~ FIELD OF INVENTION 

This present invention relates a method for providing a secure encrypted computer 
communication channel across the Internet, more particularly, the use of e-mail access software 
and the addition of an integrated circuit embedded with several encryption algorithms to a 
communications device, thereby providing encryption/decryption capabilities. 

BACKGROUND - DESCRIPTION OF PRIOR ART 

Typical communication between two or more parties through the Internet 1 8 using a computer, 
10 and 1 1 is accomplished through the use of a communications devices, 14 and 16 and 
communication software as referenced in FIG 1 . A computer with communication capabilities, 
as reference in FIG 2 will utilize a communication controller 20 to interface with the Internet 22. 
The Internet consists of many public domain computers, electronic routers and switches, and 
computer servers generally accessible by the public. Accessing this network is not controlled by 
any individual organization and is not limited in any ways other than by protocol definitions 
(TCP, IP, etc). 
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Communication on the Internet between two parties can take place using two different methods: 

1 . Sending data: when one party groups a message and/or data package into a specific formatted 
sequence, attaches the Internet address, termed an Internet Protocol (IP) Address and then 
sends the message and IP Address to the Internet. The data is typically packetized using 
commercially available software and sent from the computer through the communication 
device onto the Internet. 

2. Accessing data: when one party connects to a public or private database across the Internet 
by connecting to the database's website. Access is typically made by using the 
communication device to connect to the website's URL Address. 

Originally, the security of these communications was not an issue as very few individuals 
possessed the necessary computer hardware or technical expertise to intercept the messages. 
However, the arrival of inexpensive personal computers and the explosion in the popularity of 
the Internet, in particular electronic commerce (e-commerce), prompted the development of 
computer communication security devices. 

The existing method of security that presently exists is computer software programs that 
encrypt communication data between two users using encryption algorithms, such as the 
Blowfish algorithm. U.S. Pat. No. 6,014,444 relies an cypher key approach for encryption. These 
methods involve using a key, known by both the sender and receiver, which is used by the 
encryption algorithm to encode the data into an unrecognizable format.. The data is then passed 
from the sender to the receiver. After successful transmission, the receiver has an encrypted data 
package. The receiver must then get the key from the sender and use it to re-run the same 
decryption algorithm to decrypt the message. An example of this software is found in the 1999 
PC Guardian Incorporated "Encryption Plus for Email" product datasheet. 

The security of these software encryption systems may be compromised as the software 
(therefore the encryption algorithm) may be subject to computer hacking. Furthermore, the 
myriad of encryption software has led to incompatibilities. One encryption program is generally 
incompatible with a competing company's software. Therefore, the sender and the receiver must 
be using the same program. Lastly, once the encryption algorithm has been compromised, 
messages encrypted with the algorithm may easily decrypted. A person located external to the 
communications network may intercept and decrypt the message if the software has been 
effectively "hacked". 

A different security approach has involved the use of computer smart cards. U.S. Pat. No. 
5,761,306 provides other improved methods of encryption involving a system of computers to 
exchange public keys over an insecure network. These systems rely on a combination of nodes 
that are implemented by a computer, smart card, a stored data card in combination with a 
publicly accessible node machine. This system, however, will still depend on the effectiveness 
of the underlying encryption software and require the user to possess a smart card to effectively 
operate. Additionally, these software encryption systems generally only provide single layer 
encryption, in that the entire message will be encrypted using one algorithm. 



U.S. Pat. No. 5.835,603 describes a home banking system using an encrypted modem as part of 
its system. This system is similar to all standard encryption techniques, but differs from the 
present invention in that it does not specify asymmetric and symmetric encryption functions 
embedded into an integrated circuit. Additionally, it does not utilize an Internet IP Address as 
part of its encryption system and does not offer any solutions for decryption. 

Therefore, it is further desirable to have the encryption algorithm encoded onto a integrated 
circuit within the communication device. As such, hacking into the encryption chip would 
require purchasing an encryption chip and reverse engineering the chip to the underlying 
physical operations. In addition, for a large number of electronic network users, the private keys 
should be securely transmitted over the network. 

SUMMARY 

The present invention discloses an apparatus and method for providing secured information 
exchange through the Internet and Intranet, consisting of a computer communications device 
containing an integrated electronic circuit embedded with asymmetric and symmetric 
encryption/decryption algorithms. 

According to the present invention, furthermore, there is provided a multiple step process which 
is added to existing standard Internet communication sequences for both sending and accessing 
data to implement the encryption procedure. 

Other features of the present invention will become apparent from the accompanying drawings 
and from the detailed description which follows. 

OBJECT AND ADVANTAGES 

The present invention provides advantages over existing prior art in that: 

(a) The inclusion of a hard wired integrated circuit containing embedded encryption algorithms 
into the computer communication device provides increased security over current software 
encryption systems. One wishing to discover the encryption algorithm would be required 
reverse engineer the chip down to the operational level (examine the gates and transistors 
comprising the chip function), as opposed to external program hacking to which a software- 
only system is susceptible. Such an effort would not generally be cost effective. 

(b) Secure automatic electronic private key transmission between sender and receiver. 

(c) The communication device with the integrated circuit, when installed in a computer, 
contains all the encryption hardware and software. No additional encryption technology is 
required to be purchased and installed. 

(d) The process accompanying the present invention when incorporated to existing Internet 
communication sequences will require verification of the receiver's Internet or IP address 
before transmitting the encrypted data. Current systems do not require verification of the 
recipient's Internet or IP address. 
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BRIEF DESCRIPTION OF THE DRAWING 

The present invention is illustrated by way of example, and not by way of limitation, in the 
figures of the accompanying drawings and in which like reference numerals indicate similar 
elements and in which: 

FIG 1 is a block diagram of a typical communication network. 

FIG 2 is a block diagram of a computer with a communications device. 

FIG 3 is a block diagram of an encryption/decryption communication device in accordance with 
an embodiment of the present invention. 

FIG 4 is a flow chart of the encryption/decryption method in accordance with an embodiment of 
the present invention. 

DETAILED DESCRITPION OF THE PRESENT INVENTION 

The present invention contains all the functions necessary for secure communications in one 
physical device as referenced in figure 3. This device contains an encryption and decryption 
integrated circuit 30 that uses a combination of asymmetric and symmetric functions to encrypt 
and decrypt data. The encryption/decryption integrated circuit can be accessed by the user 
through a password protected user interface controller 32. This communication device also 
contains a signal processor 34 used to process the incoming and outgoing data. This may include 
multiplexing, de-multiplexing, modulating, demodulating, encoding, decoding, and error 
detection and correction. Memory 36 is included within the device for algorithm, control, and 
data storage. A network interface 38, electrical power 40, and a clock for internal timing 42 is 
also part of the communication device. 

The present invention involves a multiple step process which is added to existing standard 
Internet communication sequences for both sending and accessing data. A primary private key is 
encrypted using a public/private key pair, then the remainder of the data is encrypted with a 
faster algorithm using another randomly generated primary key. An Encrypted Internet 
Communication System is required at both the sender and receiver for successful secure 
transmission. The verification process is completed using a set of software and hardware 
verification steps that unlock the encryption algorithm hardware to the receiver. The process 
involves a communication setup, a sender sequence and a receiver sequence. The process is as 
follows: 



5 



Communication Setup 

When the communication device and associated software is installed into the computer, the 
following sequence is followed to setup levels of security: 

1 . The software requests a password from the user, either the sender or receiver. 

2. The software converts the password to a digital, electronic bit format and transfers the 
digitized password to the communication device hardware, which stores the password 
permanently into a non-volatile hardware register. 

Send Sequence 

1 . To access the encryption algorithm, the user must successfully re-enter the password into the 
software and matched in the hardware during the send sequence 44. 

2. Sender requests encryption access from software. 

3. Software asks for password from sender. (Steps 3 and 4 are optional). 

4. Software compares password with previously stored password during the Communication 
Setup sequence of communication system. If matched, encryption algorithm is made 
available to sender. If not matched, encryption algorithm is not made available to sender. 
(Steps 3 and 4 are optional). 

5. Data is passed through encryption hardware in communication device. The data encryption 
is performed in the following manner as referenced in figure 4: 

a. the communication device accesses the receiver's public key. A Certification Authority (CA) 
is used to verify the receiver's public key 46. 

b. the sender randomly generates its private key 48 

c. the sender's private key is encrypted using the receiver's public key 50 

d. the sender's data is encrypted using the sender's private key 52 

e. the receiver's Internet Protocol's (IP) address is acted upon in one of the following ways: 

i) the receiver's IP address is not encrypted 

ii) a copy of the receiver's IP address is encrypted using a private key (different private 
key from the one encrypting the message) 54 

f. the IP address, encrypted copy of the IP address (if ii is performed), encrypted private key, and 
encrypted message is transmitted as a message block to the receiver. If the IP address is 
encrypted the message block could be sent to the receiver through a private network to verify the 
receiver. If the IP address is not encrypted, the message block is sent to the receiver through 
normal channels 56. 



Receive Sequence 
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1 . After message data received by receiver, receiver requests software to de-encrypt data 58. 

2. Software requests a password to communication device; receiver enters password. 

3. Software transfers receiver password to communication device. Compare of password is 
completed by communication device. If matched, de-encrypt sequence is allowed to 
continue. If not matched, sequence is halted and error message is passed back to software. 

4. Software then sends a un-encryp te d e-mail on to the Internet through the communication 
device that provides a return message to the same (receiver) IP Address. The message will 
include a unique code to signify a verification check (unique verification code) and the IP 
Address. Numerous techniques can be used to verify the e-mail has reached the actual 
Internet, such as. use of "Certification Authority", reading the Domain Name Server and 
returning verification data and/or use of a private server that provides a return of the e-mail 
with verification of reaching the Internet. In all cases, the message will return to the receiver 
IP Address along with the unique verification code. 

5. If the receiver's IP address is verified then the encryption of the data can proceed. 

6. Software then transfers data to communication device. 

7. The receiver's private key (as part of its private/public key pair) is then used to decrypted the 
sender's private key 60. 

8. Then the receiver uses the sender's private key to decrypt the message 62. 

9. The receiver's communication device deletes the sender's private key 64. 

10. The receiver's communication device sends a message receipt to the sender 66. 

CONCLUSIONS, RAMIFICATIONS, AND SCOPE OF INVENTION 

Accordingly, the reader will see that the present invention provides multiple layer of 
encryption, yet will not impinge on the operational utility of the computer communications 
device. Furthermore, the apparatus and process outlined above prevents or efficiently deters 
external computer theft of sensitive information. Lastly, the apparatus and process may be 
upgraded with the addition of different algorithms. 

While the above description contains many specifications, these specifications should not be 
construed as limitations on the scope or utility of the invention, but are presented to exemplify a 
preferred embodiment thereof. 

Accordingly, the scope of the invention should be determined not by the embodiments 
presented, but by the appended claims and their legal equivalents. 

CLAIMS 

1 . An apparatus for efficient encrypting and decrypting Internet, Intranet, or e-mail messages, 
comprising: 
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an integrated electronic circuit, said circuit physically located within a computer communication 
device; 

said circuit embedded with a common digital bit array; 
said circuit embedded with a random private cypher key generator; 
said circuit embedded with asymmetric encryption algorithms; 
said circuit embedded with symmetric encryption algorithms; 
said circuit embedded with asymmetric decryption algorithms; 
said circuit embedded with symmetric decryption algorithms. 

2. An apparatus as recited in claim 1 , wherein said circuit is located external of said computer 
communication device, and means for connecting said externally located circuit to said 
communication device. 

3. A process to permit access to said encryption and decryption circuit recited in claim 1 , 
wherein user access to said circuit further comprises: 

means for converting multiple user defined passwords into digital bit arrays; 

means for programming said digital bit arrays into a non-volatile register located within said 
circuit; 

means for verifying future user request to access said circuit with said stored digital bit arrays; 

means for permitting user access to said circuit upon verification of user defined password with 
stored digital bit arrays; 

means for denying access to said circuit upon lack of verification of user defined password with 
stored digital bit array. 

4. A process to bypass said encryption and decryption circuit recited in claim 1 ? comprising 
means for said computer communication device operating without accessing said circuit, thereby 
said communications device operating unencrypted. 
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5. A method of sending encrypting Internet. Intranet, or e-mail messages, comprising the steps 
of: 

encrypting a message using an integrated circuit embedded with encryption algorithms, 

said integrated circuit further embedded with random private cypher key generator; 

said integrated circuit further embedded with a common digital bit array; 

appending an encrypted message header to said encrypted message, said message header 
encrypted using a receiver's public encryption key; 

said encrypted message header further comprising the sender's private signature cypher key and 
a common digital bit array; 

means for transmitting said encrypted message header and said encrypted message to receiver 
over Internet; 

means for transmitting said encrypted message header and said encrypted message to receiver 
over Intranet; 

means for transmitting said encrypted message header and said encrypted message to receiver by 
e-mail; 

means for transmitting said encrypted message header and said encrypted message to receiver 
through wireless communication medium. 

6. A method of receiving and decrypting an encrypted message as recited in claim 5, 
comprising the steps of : 
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means for receiving an encrypted message header and encrypted message header and an 
encrypted message over Internet; 

means for receiving an encrypted message header and encrypted message header and an 
encrypted message over Intranet; 

means for receiving an encrypted message header and encrypted message header and an 
encrypted message by e-mail; 

means for receiving an encrypted message header and encrypted message header and an 
encrypted message through wirelss communication medium; 

receiver gain access to decrypting integrated circuit as recited in claim 2; 

means for integrated circuit to decrypt and validate common digital bit array located in message 
header; 

means for integrated circuit to decrypt sender's private signature cypher; 

means for sender's private signature cypher key to permit access to decrypting integrated circuit 
for decryption of message; 

means for deleting sender's private signature cypher key from memory of receiver's computer; 

means for preventing receiver from viewing, saving, copying, or retaining sender's private 
signature cypher key. 
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7. A method for efficient encryption and decryption of Internet, Intranet, or e-mail messages, 
comprising the steps of: 

encrypting a message at a sending unit which is to be sent to a receiving unit using an integrated 
circuit embedded with algorithm located within said sending unit; 

appending to the message at said sending unit the receiver's unencrypted IP address; 

appending to said message the receiver's encrypted IP address; 

said sending unit sends said encrypted message with said unencrypted IP address and said 
encrypted IP address; 

receiving unit with an integrated circuit embedded with an encryption algorithm located within 
said receiving unit receives said encrypted message with said unencrypted IP address and said 
encrypted IP address using a receiving unit; 

receiving unit decrypts said encrypted IP address, storing said decrypted IP address in a register 
built into said integrated circuit embedded encryption algorithm located within receiving unit; 

receiving unit stores said unencrypted IP address in a register built into said integrated circuit 
embedded with an encryption algorithm located within receiving unit; 

means for comparing said register storing unencrypted IP address to said register storing 
decrypted IP address; 

receiving unit decrypts said message if said register storing unencrypted IP address matches said 
register storing encrypted IP address; 
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means for halting decryption process if said register storing unencrypted IP address does not 
match said register storing encrypted IP address. 
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ENCRYPTED INTERNET AND INTRANET COMMUNICATION DEVICE 

ABSTRACT: A method and apparatus for providing multiple layer encrypted Internet, Intranet, 
or e-mail communication device communications. In particular, the process of encrypting 
Internet. Intranet, or e-mail messages with encryption algorithms embedded in integrated circuits 
incorporated into the communication device, with access to the encrypting circuit requiring a 
validation of a randomly generated cypher key and an user defined password. 
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WHEREAS, I. David Czajkowski, residing at 332 Alviso Way, Encinitas, CA 92024 USA, a citizen of (he United States 
of America, co-invented certain new and useful improvements disclosed in an application for United States Letters Patent titled 
Encrypted Internet Modem Communications System, and executed me on even date herewith; and 

WHEREAS. GuardDog Communication, Inc., a Nevada Corporation, located at 332 Alviso Way. Encinitas. CA 92024 
USA (hereinafter, together with any successors, legal representatives or assigns thereof, called ik Assignee v ). wants to acquire the 
entire right, title and interest in and to said improvements and application: 

NOW, THEREFORE, in consideration of the sum of One Dollar ($1.00) to me in hand paid, and other good and valuable 
consideration, the receipt of which is hereby acknowledged, have sold, assigned, transferred and set over, and do hereby sell, 
assign, transfer and set over to Assignee the entire right, title and interest in and to said improvements, and said application and all 
divisions, substitutes and continuations thereof, and all United States Letters Patents which may be granted thereon and all reissues 
and extensions thereof, and all priority rights under the International Convention for the Protection of Industrial Property for every 
member country, and all applications for patents (including related rights such as utility-model registrations, inventor s certificates, 
and the like) heretofore or hereafter filed for said improvements in any foreign countries, and all patents (including all extensions, 
renewals and reissues thereof) granted for said improvements in any foreign countries; and each hereby authorizes and requests the 
United States Commissioner of Patents and Trademarks, and any officials of foreign countries whose duty is to issue pnients on 
applications as aforesaid, to issue all patents for said improvements to Assignee in accordance with the terms of this assignment: 

AND I HEREBY covenant that I have full right to convey the entire interest herein assigned, and that I have not executed, 
and will not execute, any agreement in conflict herewith; 

AND I HEREBY further covenant and agree that I wil! communicate to Assignee any facts known to me respecting, said 
improvements, and testify in any legal proceedings, sign all lawful papers, execute all divisional continuation, substitute and 
reissue applications, make all rightful oaths and generally do everything possible to aid Assignee to obtain and enforce proper 
patent protection for said improvements in all countries. 

THIS ENTIRE ASSIGNMENT inures to the benefit of Assignee, its successors and assigns, and is binding upon me. my 
heirs, successors and legal representatives. 



IN TESTIMONY WHEREOF, I hereunto set my hand this 2. day of Pt^^t 





David Czajkowsk^ 

STATE OF CALIFORNIA ) 

) ss. 

COUNTY OF SAN DIEGO ) 

On this before me 

undersigned Notary Public, personally appeared David Czajkowski , personally known to me (or proved to me on the Iffsjs of 
.sat isfactory evidenc e) to be the person whose name is subscribed to the within instrument and acknowledged to me tha jcheffi e — 
executed the same. 



Notary Public fygttf^O^f ^'^^^J^ 
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and extensions thereof, and all priority rights under the International Convention for the Protection of Industrial Property for every 
member country, and all applications for patents (including related rights such as utility-model registrations, inventor's certificates, 
and the like) heretofore or hereafter filed for said improvements in any foreign countries, and all patents (including all extensions, 
renewals and reissues thereof) granted for said improvements in any foreign countries; and each hereby authorizes and requests the 
United States Commissioner of Patents and Trademarks, and any officials of foreign countries whose duty is to issue patents on 
applications as aforesaid, to issue all patents for said improvements to Assignee in accordance with the terms of this assignment: 

AND I HEREBY covenant that 1 have full right to convey the entire interest herein assigned, and that I have not executed, 
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reissue applications, make all rightful oaths and generally do everything possible to aid Assignee to obtain and enforce proper 
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David CzajkowskL 




1 -Z^zSt 



STATE OF CALIFORNIA ) 

) ss. 

COUNTY OF SAN DIEGO . ) 

On this before me 

undersigned Notary Public, personally appeared David Czajkowski , personally known to me (or proved to me on the bjLSjs of 
.sat isfactory evidenc e) to be the person whose name is subscribed to the within instrument and acknowledged to me tha^he^Se- — 



executed the same. 



Notary Publ 




DONALD C. SMfTH 
Commission # 1202968 
Notary Public - California 
San Diego County 
MyComm.£xprg sNov23. 2DCE 
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